Plan upgrade wave — 0.1.90 → 0.1.91

One wave, one plan, one approval. Each environment runs the full upgrade workflow (preflight → backup → snapshot → migrate → roll out → verify); the wave halts on the first verify failure.
Release 0.1.91
1 Select targets
2 Order & gates
3 Review & approve

Candidates on 0.1.90

preflight has already run clean on all four · compat matrix passed
EnvironmentCloud / RegionProfilePreflightNotes
polaris-media / devazure · westus2development passedsuggested canary dev profile, lowest blast radius
sable-insurance / prodazure · uksouthproduction passedbackup verified 6h ago
verde-foods / prodaws · us-east-1production passed3 drift findings reconcile plan pl-88c1 pending — drift does not block upgrade
kestrel-bank / prodazure · northeuropeproduction passedINC-241 open scheduled last — or uncheck to exclude
4 environments selected
Not eligible: quill-legal/dev (0.1.86 — below minUpgradableFrom for a direct wave; upgrade individually first) · cobalt-mining & atlas-manufacturing (air-gapped — upgrades ship in the signed bundle, not in a connected wave).

Wave summary

Target release
0.1.91 signed ✓
Environments
4
Canary
polaris-media / dev
Estimated duration
~3h 10m (incl. soak)
Rollback
auto on verify failure
Downtime
none — rolling per environment
Compatibility: k8s ≥1.30 ✓ all targets · clouds azure/aws ✓ · from-version 0.1.90 ≥ floor 0.1.1 ✓